Tracking users across browsers

Thom Shannon has released an interesting bit of Flash/JS code which enables a site to track users across browsers. It only works on Windows at the moment and uses Flash local storage to retain the information. I think this could be great for tracking malicious TOR users or attackers behind proxies. The example along with source code can be viewed here:-

Cross cookie example

Great work Thom!

4 Responses to “Tracking users across browsers”

  1. pdp writes:

    I don’t like not being able to see the Flash object sources 🙂 so, here I coded it for you!

    import flash.external.ExternalInterface;
    
    class FlashCookieManager {
    	public function FlashCookieManager() {
    		ExternalInterface.addCallback("get", this, get);
    		ExternalInterface.addCallback("set", this, set);
    		ExternalInterface.addCallback("cls", this, cls);
    	}
    
    	public function get(name, path, secure) {
    		var s = SharedObject.getLocal(name, path, secure);
    		var v = s.data.value;
    
    		s.close();
    
    		return v;
    	}
    
    	public function set(data, name, path, secure) {
    		var s = SharedObject.getLocal(name, path, secure);
    		s.data.value = data;
    
    		s.flush();
    		s.close();
    	}
    
    	public function cls(name, path, secure) {
    		var s = SharedObject.getLocal(name, path, secure);
    
    		s.clear();
    		s.flush();
    		s.close();
    	}
    }
    
  2. Gareth Heyes writes:

    Hehe thanks 🙂 I didn’t know about the SharedObject in Flash.

  3. pdp writes:

    and here is the link that explains how to compile it:

    http://www.gnucitizen.org/blog/flash-cookie-object-tracking/

    cheers,
    pdp

  4. adam writes:

    Cool! I test it on FF and opera ^_^!